{"id":"CVE-2021-3990","aliases":["GHSA-vrgh-5w3c-ggf8"],"url":"https://o3.security/vulnerability/CVE-2021-3990","summary":"showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)","details":"showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)","published":"2021-12-01T11:15:07.977Z","modified":"2026-08-07T19:46:55.597957Z","cvss":{"score":6.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"},"epss":{"score":0.00863,"percentile":0.55432,"asOf":"2026-08-23"},"cisaKev":null,"exploitsKnown":1,"affectedPackages":[{"ecosystem":"Packagist","name":"showdoc/showdoc","fixedVersion":"2.9.13"}],"fix":{"url":"https://github.com/star7th/showdoc/commit/a9886f26c08225e0adca75c67dfca3f7c42b87d0","label":"star7th/showdoc@a9886f2"},"references":[{"type":"FIX","url":"https://github.com/star7th/showdoc/commit/a9886f26c08225e0adca75c67dfca3f7c42b87d0"},{"type":"FIX","url":"https://huntr.dev/bounties/0680067d-56a7-4412-b06e-a267e850ae9f"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-07T19:46:55.597957Z"}}